Does firebase login:ci have access to all my projects?

Question

I am using the firebase login:ci token for CI/CD. But there is not enough documentation regarding the token.

Does it have access to all my firebase projects where my account has access or only the current active project?

Where can I see a list of all tokens and their activity?

The solution I am going for is creating a throwaway email and adding that to the project I want to deploy. Is this ok?

Answer 1

When you run firebase login:ci you get prompted to log in with a Firebase account. After picking your account, you get a dialog that shows the permissions you're granting. This contains:

This will allow Firebase CLI to:

View and administer all your Firebase data and settings

So if you click Allow in that dialog, the Firebase CLI will have access to all Firebase projects that the account has access to. The generated token does (as far as I know) have access to the same scope.